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ABSTRACT 

A complex system envisioned can accomplish a given 
mission with the aid of any one of several alternative 
structures. Each of these alternative structures (subsys- 
tems) , although capable of mission accomplishment, exhibits 
different levels of performance due to its component inven- 
tory. The structures are ordered in preference accordingly. 
Operation on less-preferred structures is a function of 
component/structure failure histories in prior structures. 
Failures are classified by three levels of severity. A 
system effectiveness model is developed to provide a measure 
of effectiveness for the overall complex system which encom- 
passes all possible alternative structures. 
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TABLE OF SYMBOLS AND ABBREVIATIONS 



Symbol 


Meaning 


S . 
3 


Alternative structure j from the admissi- 
ble set of alternative structures 
{Sj> j = 1,2,”-", jj for mission m 


c jg 


Critical failure event in S 

3 




Major failure event in S^ 




Minor failure event in S . 

3 


s? . 

3 


{cjg' ^ = 1'2'***' Gj| , the set of all 

critical failures in S. 

3 




iM k = 1,2,»»», K.} , the set of all 
L 3 K 3 J 

major failures in S^ 


K. 

: 


jm^, H = 1,2,””*, Lj| , the set of all 
minor failures in S 

3 


T 


Mission m duration time 


X . / X • 
ig 3 k 


X . . Failure rates associated with C. , M., , 

3l 39 3 k 

and m_.^, respectively 


fc jg' 


t . ^ Operation time during mission associated 

with C jg* M.^, an< ^ m j^' respectively 


D jk, j+l 


Degradation factor on effectiveness of 

structure S.,, from the major failure M 

3+1 J 3 k 

in S . 

3 


d j^ j 


Degradation factor on effectiveness of 

structure S. from the minor failure m.. 

3 3 ^ 

in Sj 
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RCj (t) 
RMj (t) 




E 

3 



E . 

3 




'k 



Y . 



3 



I 



E. 

3 




Probability of no critical failures in Sj 
during the time interval (0,t) 

Probability of no major failures in 
during the time interval (0,t) 



Alternative structure S. effectiveness 

3 

(Probability of mission success on Sj) 
given no failures 



Average effectiveness of accounting for 
major failures in structures , S 2 * . . . > Sj_^ 

Average of E..' accounting for minor failures 

in S . 

3 

Time to event minor failure in compo- 

nent A in S . 



Time to event M.,, , major failure in com- 

3 k 

ponent k in , 



the time to 



Min {t j 1 ^ c Tj ' 2 * ” " ’ " T j'K.,i 
first major failure in S . , 

j 3 

^ Yj , , the minimum time for a sequence 

j*=l 

of major failures in structures 



S r S 2'*“ f S j 



P„D.F. for minimum time for a sequence of 
major failures in structures s p S 2 '"‘'^j 
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>s I 



j 



RCj + 1 (T-t) 



RM j+1 (T-t) 



P . 



3 



E 



m 



K. 



^ Xj k , summation of major failure rates 



k=l 



for components in 



-r- Xi , approximated mean time to maj 



3 i=l 



or 



failure in a sequence of major failures in 
S l' S j 

Probability structure experiences no 

critical failures in remaining mission 
time (T-t) 



Probability structure S j + ^ ex P er i ences no 
major failures in remaining mission time 
(T-t) 

Probability structures S^, S 2 ,***, 
experience major failures and no critical 
failures,, and Sj +1 experiences no major or 
critical failures in (0,T) 

System effectiveness on mission m account- 
ing for all reliable alternative structures. 
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CHAPTER I 



INTRODUCTION 

In light of the present day advancing technology, sys- 
tems have become vastly complex. Coupled with this rise in 
complexity has been a gradual increase in component and 
system size, weight and/or cost. The rise in complexity in 
just avionics systems over the 12-year period between 1953 
and 1965 has been by a factor of 74, not to mention the ex- 
pected complexity factor of 160 times the 1953 avionic sys- 
tem for the year 1968. [l] None- the-less these new complex 

systems cannot always incorporate redundant components or 
subsystems due to size, weight, and/or cost constraints; 
this is particularly true for an aircraft. However, there 
may exist a less-sophisticated component or group of com- 
ponents that can perform the same (or similar) function as 
a complex component, but somehow in a less effective manner, 
e.g., solution time longer, greater uncertainty in solution, 
or lower probability of success. This less effective group 
of components, "alternative structure", can also accomplish 
the mission and thereby improves the overall system effec- 
tiveness by a new form of redundancy, since the usual form 
of redundancy implies equal effectiveness. 

The foregoing concerning complex systems and associ- 
ated constraints applies most assuredly to military weapons 
systems being contemplated for aircraft, ship and submarine 
platforms of the future. 
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I. PURPOSE OF THE SYSTEMS EFFECTIVENESS MODEL 

In spite of the enormous complexities and the size, 
weight and/or cost constraints, a weapons system must 
still achieve a high mission reliability, usually in the 
high nineties, where mission reliability is defined to be 
"the probability of adequate system performance for the du- 
ration of the mission in the usual mission environment." 

In this paper adequate system performance will imply that 
at least one alternative structure, i.e„, a subsystem ca- 
pable of mission accomplishment, remains operable. An 
operable structure by definition experiences only repair- 
able type (minor) failures during a mission. 

The problem is to develop a model to measure the over- 
all system effectiveness which incorporates the effects of 
availability, conditioned effectiveness and the component/ 
structure failure degradation over all admissible alterna- 
tive structures. The measure of system effectiveness 
derived, hopefully, will approximate the "systems perform- 
ance effectiveness" defined as "a measure of the extent to 
which a system can be expected to complete its assigned 
mission within the time frame under the stated environment- 
al conditions." [2] 

II. SIGNIFICANCE OF THE MATHEMATICAL MODEL 

The United States Navy currently has under development 
several new complex weapons systems to cope with the growing 
submarine threat. The P3C patrol aircraft, being developed 
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by Lockheed at Burbank, California, and under evaluation by 
the ASW Projects Office, Washington, D.C., is one such weap- 
ons system. The revolutionary weapons system incorporates 
a variety of sophisticated detection sensors in a complex 
computerized system design. For each of the several mis- 
sions of the P3C aircraft, there exists a set of alternative 
structures of components feasible to the accomplishment of 
that mission. The ultimate purpose of this effectiveness 
model is to obtain a quantitative measure to be used in de- 
sign alteration comparisons in the P3C aircraft. 

The alternative structured approach for the P3C air- 
craft seems practicable for the following reasons: (1) by 

the nature of the aircraft/submarine detection and tracking 
problem, the structure most effective for a mission may 
change during a mission engagement as a result of environ- 
mental or target tactics, and (2) by reason of limited 
weight and space requirements aboard an aircraft, a failure 
may occur to cause an operating structure to be inoperative 
(non-repairable) for the remainder of the mission. Either 
of these reasons necessitates operation on another alterna- 
tive structure, usually of different performance and/or re- 
liability. 

The mathematical model developed by Zagor, et al., [3] 
for computing the reliability of a hypothetical multi-model 
fire control system treated a similar system redundancy 
variation. In the Zagor model the system effectiveness of 
a three mode hypothetical fire control system was formulated 
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accounting for mode effectiveness and mode likelihood. The 
system effectiveness model to be described in Chapter II 
and derived mathematically in Chapter III takes into con- 
sideration three levels of failure severity; failures 
unacceptable to mission accomplishment, failures permissi- 
ble but non-repairable , and failures permissible and repair- 
able . 
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CHAPTER II 



DESCRIPTION AND FORMULATION OF MODEL 

A particular mission of a complex system can be accom- 
plished by any one of several alternative structures (sub- 
systems) of the system components. The alternative struc- 
tures are composed of components in logical series and are 
ordered in preference by their attainable degree of mission 
performance. Component failures in this complex system are 
grouped into three classes of severity, namely critical, 
major and minor failures. Component failures that are not 
allowable in the accomplishment of the mission, and as such 
cause mission abort when they occur, are defined as critical 
failures. A major failure is one whose occurrence precludes 
any further operation with the associated structure during 
mission, i.e., forces a shift to a lower priority structure, 
and may result in degrading the effectiveness of an alterna- 
tive structure. Component failures repairable during a mis- 
sion by on-board repair parts are defined as minor failures. 
Minor failures degrade s true ture/sys tern effectiveness (per- 
haps proportional to structure down-time or function lost) 
but do not require a shift to another alternative struc- 
ture. This model establishes a functional relationship to 
quantify the overall system effectiveness taking into con- 
sideration the various performance levels and reliabilities 
of all mission-orientated alternative structures. 
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The primary or priority one alternative structure is 
that structure capable of obtaining the greatest degree of 
mission performance due to its sophisticated component de- 
sign. The priority one structure, S^, may in a particular 
system include all components of the system. However, this 
is usually not the case since most complex systems incorpo- 
rate redundant components (components that will perform the 
same function) having a lower performance capability. The 
performance of the priority one structure in a failure-free 
environment is primarily a function of three variables, 
namely: (1) the state of the art in component/system engi- 

neering design, (2) the environmental operating factors en- 
countered during a mission, and (3) the component operator's 
state of training and performance levels. However, there 
exists some average level of effectiveness, , realized 
when operating the system utilizing the primary structure 
S-^ in a failure-free environment. But when failures occur, 
structure/system effectiveness becomes degraded. 

For a particular mission a complex system has the set 
of admissible alternative structures (s^, j = 1,2,.°°, j} 
ordered in preference. Each alternative structure S ^ has 
associated with it the sets of components susceptable to 
critical, major and minor failures, i.e., & ^ ^ and 



respectively, where 

*3 = Kl' c 



j 2 ' 



Th = {» n 



31 ' M j2' 



M 



■jg' ' c jGj} 
jK.l 



j*' 



M 
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K 



j l m jl' m j2' ' 



m jA' *•* ' m jL 



.} 



and c j . » Mj # , nr . represent the events of critical, major 
and minor failures in structure S ^ , respectively. Similar- 
ly, X. , X ... , X . „ and t. , t , t . „ correspond to the 
}g jJt jg' ;)k' * 

component failure rates and operating durations for the 
components in 3^, and K ^ , respectively. The effective- 
ness of a system experiencing a critical (abort type) fail- 
ure will be by definition equal zero. The major failures 
are those failures which are non-repairable during the mis- 
sion and which force system operation into an alternative 
structure of less desirable performance. This less effect- 
ive structure is also susceptible to degradation from the 
major failure(s) in prior s tructure (s) . Let the degrada- 
tion factor, j+]/ ^* e defined as the degradation factor 

on structure S . , . resulting from event M.. in structure S.. 

j+1 y :k j 

Minor failures also connote a degrading effect, but the de- 
gradation factor is applied to present structure effective- 
ness. Now d. . . denotes the degradation factor on struc- 
3 t't 3 

ture S. due to the event m. „ in S.. Several assumptions are 
J 3 * 3 * 

now made about the component failure distributions. 

Independent exponential failure time distributions are 
assumed on all components and on all subassemblies whose 
failure is a critical, major, or minor event. The failure 
rate, X, of a component is the same regardless of the alter- 
native structure in which it is operating. The failure 
rates of components in non-operating states are equal to 
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zero. If a particular component in the system is suscept- 
ible to more than one class of failure* then that component 
will be subdivided into pseudo components affected by only 
one class of failure for ease of formulation of the model. 
The effect of failures on mission performance will now be 
considered. 

From the preceding discussion of failure types and con- 
sidering a particular system design* one can enumerate the 
success paths (system failure histories) such that the mis- 
sion will still be accomplished, but degraded in varying 
amounts by the effects of associated failures. To obtain a 
quantified measure of effectiveness that incorporates the 
flexibility in performance and reliability in an alterna- 
tive structured system* the system effectiveness model is 
formulated below encompassing all possible success paths in 
the accomplishment of the mission. 
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CHAPTER III 



SYSTEM EFFECTIVENESS MODEL DERIVATION 

Mission accomplishment is associated with the greatest 
system effectiveness when no critical or major failures 
occur during the mission duration (0,T) . In this particular 
"success path", i.e., no failure in the primary structure 
S^, the overall system effectiveness is the product of E^ 
(the average effectiveness of structure accounting for 
minor failure degradation effects) times the probability of 
no critical or major failures. Let RCj(t) and RM^(t) be 
respectively the probability of no critical and of no major 
failures in structure S ^ during time (o,t). Then, if only 
one structure existed for a particular system, the system 
effectiveness would be 

E = E 1 x RC 1 (T) x RM 1 (T). 

However, in the complex system envisioned here, there are 
several alternative structures feasible to the accomplish- 
ment of mission, and the alternative structures are utiliz- 
ed when preferred structures fail. As such, system effec- 
tiveness must account for this incremental effectiveness 
obtained via alternative structures when these same struc- 
tures are probable. 

The formulation of such a model accounting for the 
effectiveness of all alternative structures weighted by 
each structure’s probability of being utilized follows: 
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System Effectiveness on Mission m (E ) is modeled 
2 v nr 



as 



m 



= x RC 1 (T) x RM X (T) + £ E.. P x 

j =2 



( 1 ) 



where 



RC 1 (T) 



Probability of no critical failures in 
during mission 




RM X (T) 



Probability of no major failures in during 
mission 




E . 
3 



and 



= Average structure effectiveness accounting 

for degradation from major failures in prior 

structures and degradation from minor failures 

in S . 

3 

= Probability structure S^, 82 * . . . » S,^ each 

experience a major and no critical failure, 

and S. , experiences no major or critical 

£ 

failures in (0,T) 



^ Accounts for all (J) admissible alternative structure 
effectiveness given the structure is reliable. 

^ During mission hereafter denoted by (0,T) . 
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Now is obtained in the following manner. First of 

all, it is assumed that the effectiveness of performance 

level of any particular alternative structure given no fail- 

ures, defined as E ^ , is known or may be estimated by opera- 

tional exercises. The E ^ represents the nominal structure 

S . effectiveness for the current state of the art, the en- 
3 

vironmental operating factors encountered, and the opera- 
tor performance level as discussed previously. But E t must 
account for (i.e., be degraded by, when appropriate) the 

effect of major failures in prior structures S^, S 2 »...»S._^ 

\ 

on structure S.. Letting D., . be the degradation factor 

3 1K , 3 

on S. from the first major failure M.. in structure S., for 
j lk i 

i < j, it follows that 



) 


K i 

y 


L 

i=l 


L 

k=l 


l_l. 


K i 

y 


i=l 


L 

k=l 



in S. is M.. 
l lk 




for j 2,3, ««.,J 



where E^ is identically E^ , and 



Ej' = Average effectiveness of accounting for major 
failures in structures S^, S 2 / ...» S j-1 * 



^ When a major failure has no degradation effect on a 
structure, then the degradation factor is zero. 
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where the term in parentheses above is derived in Appendix A. 

A particular alternative structure Sj effectiveness 
should also take into consideration the several success 
paths under various minor failure histories within that 
structure. Therefore a weighted average of the E_j* , defin- 
ed above, where the weights are the products of the various 
probabilities of minor failure (s) and the associated minor 
failure (s) degradation seems plausible for an average struc- 
ture effectiveness capability. Formulating the above we 
obtain, assuming independent exponential distributions, the 
following : 



E • = E 
D 3 



(^Probability no minor failures in S- in (0,T)-^) 



L • 



+ E 

3 U V JZ’ ,J 
j£' =1 



+ E 

3 







r=i r=i 
r > i ' 




'Prob. m 

and m . 

3 & 

occur in 



S. in (0 , T) 
.3 



minor failures inj 
. in (0 , T) 



,Prob. no 
other mino^ 
failures in 
.S j in (0 , Tj 



+ € (small order' terms) 

Inserting the probabilistic results derived in Appendix B, 

+ 

it follows that 



A more .conservative approximation would be obtained by 

replacing t . . in the first term by T; also simplifying 
3 x* 

calculations . 
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E . = E 1 



3 *— 



L . 
3 



- In 



i=i 



j^ji 



Lj \ I - 

- I x jt ,T ) 

+ E j V - e r=1 / 



l d 



L . 



I x j* T 
1=1 
l+l ' 



' =1 



L . L . 
3 3 



+ E . 

3 



i'=l S"=l 
S">S' 



),^ji\j)^jr,j) 



l-e 




L . 

: 



- 2?j r T 






l-e 



1”=1 



"AV 

i=i 

Its,', S" 



+ e (small order terms) 



Simplification to the calculation of the E^ terms, 
when the pi X . . exponent terms are small, would be to use 

JF=1 3 ■*' 

approximation 



- r x jji T 



l-e 



1=1 



y x. T 

L , jS 
1=1 • 




discarding the higher order terms when input data shows 
them to be insignificant. 

Pj, the probability that structures S^, S 2 »***» Sj 
each experience a major and no critical failure, and struc- 
ture S j + i experiences no major or critical failures in(0,T) 
is obtained as follows. Let Yj , be the minimum J Tj,^,Tj, 2 ». . 

T.,„ f where T.,, is the time to event M.,, (major failure 
1 K • . J 3 K • 3 K 



21 



event in S . 

3 

failure in 

S. = 

3 



,) , then , represents the time to first major 
S . , . Now define 




as the "time for a sequence of major failures in structures 
S^, S 2 » . . . , Sj”, with the assumption of zero switching 

time between alternative structures. Let f^ (t) be the pro- 

j 

bability density function of the time for a sequence of 
major failures in structures S n , S^, ... , S ^ . Thus 



P. = Pr r ob./ , S 2 , . . . » S . fail major,, 



S l'S 2 »..»»Sj not fail critical, 

S^ + i not fail major for remainder of mission, 
Sj + i hot fail critical for remainder of mission J 



and 



p j = J f E. (t) 

0 3 



T 



j'=l 



RC , , ( t) 



RMj +1 (T-t) 



RC j+ 1 (T-t) 



dt 



( 5 ) 



where 



(X.)iti - 1 

V 0 



-X . t 
> 3 



j ~ 1 0 2 , 



0 J X 
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is a gamma P. D . F . [ 4 ] , where equal structure X ^ (mean time to 
first major failure is assumed) is 



K . 

J 



X = X 



where X_. = ^ X. 

k=l 



1 ' -j "jk 



= (x x + x 2 )/ 2 



X. - (X^ + x 2 + ••• + x . ) / j 



3 3 

Assuming that 1 f RC . , ( t) =1 \ RC. ,(T), then Eq. (5) 



becomes 



j'=l 



j’=l 



^"TTrc., (T) f [-^ 
3 j'=l 11 o 



>T r(XJ j t ^ 1 -(XJ 



r(j) 



*3 



K . 






k=l 






g-i 



dt 



( 6 ) 



Examining Eq. (6) for a few small j values, we obtain 



G 1 




- K 2 




- G 2 


- y X. t . 

^ ig ig r T 


” — 

-X t 




- r x 2k< T - t > 




- r X 2g (T - t) 


e s-i j 

O 


A^e 




k=l 

e 




e 9" 1 



dt 





- G 1 g 2 K 2 




f K 2 G 2 1 




I X lg t lg + I X 2g T + I X 2k T 


T 

c - 


*1 “Z X 2k " T, X 2g 


e 


Lg=l g=l k=l - 


j X . e 


“ k=l g=l -* 



dt 
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-D, 



= e 



-F X t 

X^e dt 



where 



D 1 = 



G 1 G 2 *2 

I X lg fc lg + I X 2g T + I 
g=l g=l k=l 



X 2k T 



F = 
1 



k 2 g 2 



X 1 A X 2k L X 2g 

k=l g=l 



Then it follows that 



<— K. 



~ D 2 

P ? = e % 

1 o 



(X 2 ) 2 t -x 2 t 

e 



r(2) 



- i X 3k( T - t ) 



k=l 



9=1 

J 



dt 



K 3 G 3 



-D, 



= e 2 | (X ? ) 2 t'e 



• ( X 2 2j X 3k T X 



X 3g 

k=l g=l 



dt 



-D 9 _ 9 -F~ 1 

= e (X~; t e dt 

tJ z 
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where 



^ G . 
2 1 



U 1 2 

D 2 = Z X lg fc lg + Z X 2g fc 2g I I X ig fc ig 

g=l g=l i=l g=l 



G 3 K 3 



D 2 = 



'L X 3k T 

g=l k=l 



D ' + / X 0 T + , 

2 L> 3g Lj 3k 



K 3 G 3 

F 2 X 2 Z X 3k “ 1 X 3g 

k=l g=l 



Similarly we obtain P. 



P 3 = e 



-D-, p T (X ) 3 t 2 -F t 

f(3j S dt 



Each of the integral expressions in P^, P 2 and P^ may be 
transformed into incomplete gamma functions (P^ degenerates 
into an exponential function) as follows 



P 1 = e 



. i" , D i ( \ \ r T „ F i t 
x i e dt = e kt: ) 



-D x r T -F, t 



1 O 



Fj^e * dt 



P 2 = e 



-D 2 ^ 



' r .2 „ - F 2 fc - D 2 T 

(X 2 ) te dt = e 2 j 

1 , i (P 2 ) o 



2 F 2 ^ 
(F 2 ) te dt 
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dt 






(F 3 ) 3 t 2 -F 3 t 

r(3) e 






ds 



The latter is obtained by the substitution, s = F 3 t. 

The Incomplete Gamma Function is evaluated from Incom- 
plete Gamma tables or readily from Poisson tables, after 
using the following well known identity (See Appendix C) .[5] 

f T e -xt dt , f iXTii e -XT 

J r(n) L (i) ' 

i=j 



For example 



3 s (F T) 1 -F T 

L— — & 

i=3 




Now that all terms of equation (1) have been formula- 
ted, each may be evaluated with proper input and inserted 
in Eq. (1) to give a quantitative measure of overall system 
ef f ec tiveness „ 
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CHAPTER IV 



SUMMARY AND CONCLUSIONS 
I . SUMMARY 

"The effective performance of Navy systems in fleet 
use is essential to successful Navy operations." [l] The 
alternative structure concept of a complex weapons system 
seems to have merit in the improvement of v system perfor- 
mance effectiveness." The P3C aircraft contains a complex 
system that is recognized to have such a structure due to 
the nature of its mission. 

In the preceding chapters a complex mission oriented 
system composed of a set of ordered alternative structures 
(any one of which are capable of mission accomplishment) 
was described. The preference ordering of structures was 
assumed to be by performance. Failures of components of a 
structure were classified into one of three levels of 
severity: critical, major or minor failure. The effects 

of failures on system effectiveness were accounted for by 
degradation factors, such that a critical failure caused 
total degradation or mission abort, a major failure comple- 
tely degraded the current structure, and a minor failure 
(repairable) partially degraded the current structure. 

A mathematical model for the above system design was 
then developed to obtain a quantitative measure of the over 
all system effectiveness reflecting the capability or multi 
pie success paths admissible in the accomplishment of a 
particular mission. 



27 



II. CONCLUSIONS 



Several assumptions and approximations (presumably 
conservative) were made in obtaining a closed form solution. 
In any application of the model the assumptions and limita- 
tions must be considered. First of all, the model applies 
to a specific kind of system design. The measure of effec- 
tiveness obtained from the model can only be as good as the 
input data; consequently, failure rates, performance and 
degradation factors, etc., should be revised to reflect 
current knowledge. If independent exponential failures 
cannot be assumed, then the model must be modified or used 
with discretion. When the assumption can be accepted, this 
model affords a straight-forward solution with the proper 
input paramters. 

III. ADDITIONAL RESEARCH 

Further research effort is needed to test the model 
(for example by simulation techniques) for its sensitivity, 
with current P3C design parameters. While this model treats 
a major failure as a trigger to cause a shift in alterna- 
tive structure, the model could be altered to address the 
problem of a structure shift due to a target tactical ma- 
neuver. This preliminary model when validated could by 
simulations provide insight into the effects of changing on- 
board repair parts and altering a component structure fail- 
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ure severity by incorporation of redundant components. In 
this way, design revision results in terms of "system per- 
formance effectiveness" could be quantified for decision 
purposes . 
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APPENDIX A 
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APPENDIX B 



1. 



Derivation of Probability ( No minor failures j 

in S . in (0 ,T) J 



Let X . . = the random variable time minor failure 

J & 

X.., t.. = failure rate and operation duration of 
j z j z 

the component l in structure 
Prob. I No minor failures 
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= Prob 



= exp 
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2. Derivation of Prob. / m ^ ^ , occurs\ Prob.l No other minorj 

in Sj ) \ failures in / 



in (0,T) 



Sj in ( 0 , T ) 






= Prob-.f X . . ,< T) Prob. (Min X . >T J 
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follows similarly and is given by 



0 





e 
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APPENDIX C 



i. show r T m *.: 1 e- xt at - y e- xi 

J Q r(D) L 

i=j 

where X is the mean rate of occurrence of failures. 

= Probability that the time to occurrence 
th 

of the j major failure event will be 
less than T ( represented by the term on 
left of the identity above). 

= Probability that the time to occurrence 
fcl"l 

of the j major failure event will be 
greater than T. 

= Probability that the number of major 
failure events in the time 0 to T is 
less than j . 

Since the major failure events are happening in accordance 
with a Poisson probability law with an assumed mean rate X, 
it follows that 

j- 1 

1 - Fj (T) = £ £7 (XT) 1 e" XT 

i=0 

• 00 

or Fj (T) = \ jt (XT) 1 e" XT 

i=j 



Let Fj (T) 



then, 1 - Fj (T) 



and equivalently 
1 - Fj (T) 



35 



Therefore 



(Xt) j- 1 -Xt 
o r(j) 



dt 



l +7 (XT) 1 e- XT 
i=j 
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